Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a15def77-eb45-4677-acae-14360bf9d599.roa
File: a15def77-eb45-4677-acae-14360bf9d599.roa (raw, json)
Hash identifier: cUHgc9/668S5udYQO8IanGiosUAl4BW6m1U8vOWxGaE=
Subject key identifier: 20:DD:BB:55:13:EF:63:63:56:CD:6C:6A:62:CF:F8:3E:BA:FE:71:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 19393787EF19540E154E49A784EEF4C91D7BF246
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a15def77-eb45-4677-acae-14360bf9d599.roa
Signing time: Fri 03 Jan 2025 00:00:00 +0000
ROA not before: Fri 03 Jan 2025 00:00:00 +0000
ROA not after: Fri 07 Feb 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f01:48f2::/47 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:39:37:87:ef:19:54:0e:15:4e:49:a7:84:ee:f4:c9:1d:7b:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jan 3 00:00:00 2025 GMT
Not After : Feb 7 23:59:59 2025 GMT
Subject: CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:85:00:f9:b7:a6:0f:ee:6e:31:c5:ff:4b:
49:8f:bb:e1:74:1a:e6:c5:ff:bd:da:d0:ee:c1:5e:
80:8f:46:39:24:1d:64:6c:e6:e6:1f:25:cc:e3:f1:
ce:39:4d:02:ec:8b:a2:85:fc:80:15:e9:2a:54:14:
4e:8c:1c:eb:1d:13:6b:12:7a:1f:4f:74:68:a0:22:
10:d2:38:45:c2:bb:34:7e:77:8e:51:e8:87:d6:5e:
cd:ae:ee:b4:19:be:4c:7f:65:52:53:63:ea:0c:65:
75:d3:ba:45:d0:53:fe:76:a0:30:ee:b3:d7:ac:ef:
a6:cc:19:25:01:d7:ec:d9:d8:f4:d3:1a:88:f8:3a:
7f:5c:0c:89:b4:06:70:c1:92:d8:0e:40:27:aa:f0:
13:5a:c4:96:b4:ba:5e:f5:e0:44:19:ea:d3:4f:bc:
72:02:d6:e2:27:5e:f4:2e:0c:77:b1:04:97:c3:61:
aa:de:09:b0:07:d5:64:49:9d:b2:b0:66:47:7c:05:
9f:f5:f4:f3:7b:07:e2:d2:54:78:7b:0c:32:0f:51:
e2:42:16:3f:18:15:23:14:d6:c5:ab:1e:81:b4:fc:
8c:10:f9:aa:58:00:49:6f:0b:50:4c:f8:f2:e8:55:
f1:d9:fb:2d:ed:2c:97:78:9c:3d:81:86:9e:d2:38:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:BB:55:13:EF:63:63:56:CD:6C:6A:62:CF:F8:3E:BA:FE:71:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a15def77-eb45-4677-acae-14360bf9d599.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f01:48f2::/47
Signature Algorithm: sha256WithRSAEncryption
77:a1:d2:08:e6:5b:9f:31:25:85:5d:d6:59:b1:1e:48:41:9b:
ba:5b:0c:f4:ab:d0:8d:23:f9:0d:22:2e:6a:97:b7:e7:87:97:
13:4c:8e:42:5c:47:79:5f:36:3b:1e:47:bd:03:7b:38:8a:15:
0d:e1:27:3e:84:fe:47:12:ef:10:d4:40:ed:b5:31:da:f3:2d:
6b:fb:a2:64:eb:88:c1:c4:54:35:28:7d:19:c2:3d:cd:16:ab:
e6:38:21:73:69:f9:ce:06:26:17:38:66:12:c4:56:ce:ce:63:
51:6d:32:18:41:9f:01:96:df:40:29:e5:13:2f:9d:5b:a1:53:
ff:bc:ac:9d:1b:b5:98:5b:1b:55:a9:f6:11:de:ff:9a:53:b4:
ab:a0:17:73:42:ea:64:68:5b:e7:90:fb:f0:eb:a9:70:37:80:
7c:44:cb:c7:87:4d:58:22:80:62:3d:7a:27:50:b4:57:ea:dd:
14:d3:ab:48:be:3b:77:aa:6f:56:16:fb:23:1b:cd:f3:a9:7c:
30:43:3a:78:c6:57:6f:08:f4:c4:6a:df:44:88:13:7d:98:fe:
10:63:b6:22:53:98:e5:8a:81:d9:a1:a9:e1:7e:bb:e5:65:ef:
09:0a:0c:34:c2:3a:05:b6:4a:e9:3a:08:c3:79:15:21:c8:e6:
4f:96:d8:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:01 2025 by rpki-client